---
title: "Get Security Log Source"
method: POST
path: "/security-log-source/{id}/get-item"
tags: ["Security Log Source"]
---

# Get Security Log Source

`POST /security-log-source/{id}/get-item`

## Request

- Base URL: `https://oneuptime.com/api`
- URL: `https://oneuptime.com/api/security-log-source/{id}/get-item`
- Auth: API key in header `APIKey`
- TypeScript: <https://skmtc.dev/oneuptime/apis/oneuptime-openapi-specification/docs/security-log-source/:id/get-item/post.ts> (a function with typed inputs; its response is checked against the schema)

Endpoint to retrieve a single Security Log Source by ID

## Path parameters

- `id` string, uuid, required

## Request body

- object
  - `select` SecurityLogSourceSelectSchema: Select schema for SecurityLogSource. Set fields to true to include them in the response.
    - `_id` boolean
    - `createdAt` boolean
    - `updatedAt` boolean
    - `deletedAt` boolean
    - `projectId` boolean
    - `isEnabled` boolean
    - `caseMinimumSeverity` boolean
    - `cursor` boolean
    - `lastScannedAt` boolean
    - `lastEventFoundAt` boolean
    - `lastScanResult` boolean
    - `lastError` boolean
    - `createdByUserId` boolean
    - `deletedByUserId` boolean

## Response `200`

Successful response

- object
  - `data` SecurityLogSource
    - `_id` string, uuid: ID of this object. Permissions - Create: [Project Owner, Project Admin, Security Admin], Read: [Project Owner, Project Admin, Security Admin, Security Member, Security Viewer], Update: [Project Owner, Project Admin, Security Admin]
    - `createdAt` object: Date and Time when the object was created. Permissions - Create: [Project Owner, Project Admin, Security Admin], Read: [Project Owner, Project Admin, Security Admin, Security Member, Security Viewer], Update: [Project Owner, Project Admin, Security Admin]
    - `updatedAt` object: Date and Time when the object was updated. Permissions - Create: [Project Owner, Project Admin, Security Admin], Read: [Project Owner, Project Admin, Security Admin, Security Member, Security Viewer], Update: [Project Owner, Project Admin, Security Admin]
    - `deletedAt` object: Date and Time when the object was deleted. Permissions - Create: [Project Owner, Project Admin, Security Admin], Read: [Project Owner, Project Admin, Security Admin, Security Member, Security Viewer], Update: [Project Owner, Project Admin, Security Admin]
    - `version` number: Object version
    - `projectId` string, uuid, required: ID of the project whose logs are read. Permissions - Create: [Project Owner, Project Admin, Security Admin], Read: [Project Owner, Project Admin, Security Admin, Security Member, Security Viewer], Update: [No access - you don't have permission for this operation]
    - `isEnabled` boolean, required: Whether OneUptime looks for security events in the project's logs. Permissions - Create: [Project Owner, Project Admin, Security Admin], Read: [Project Owner, Project Admin, Security Admin, Security Member, Security Viewer], Update: [Project Owner, Project Admin, Security Admin]
    - `caseMinimumSeverity` string: Threats security products write in the logs (CEF, LEEF, Palo Alto Networks, FortiGate, Cisco ASA) at or above this severity (Low, Medium, High or Critical) open security cases. Empty stores them as events only. Permissions - Create: [Project Owner, Project Admin, Security Admin], Read: [Project Owner, Project Admin, Security Admin, Security Member, Security Viewer], Update: [Project Owner, Project Admin, Security Admin]
    - `cursor` string: The time up to which logs have been read, as an ISO string: the end of the last window the scan finished. Permissions - Create: [No access - you don't have permission for this operation], Read: [Project Owner, Project Admin, Security Admin, Security Member, Security Viewer], Update: [No access - you don't have permission for this operation]
    - `lastScannedAt` object: When the logs were last read. Permissions - Create: [No access - you don't have permission for this operation], Read: [Project Owner, Project Admin, Security Admin, Security Member, Security Viewer], Update: [No access - you don't have permission for this operation]
    - `lastEventFoundAt` object: When a security event was last found in the logs. Permissions - Create: [No access - you don't have permission for this operation], Read: [Project Owner, Project Admin, Security Admin, Security Member, Security Viewer], Update: [No access - you don't have permission for this operation]
    - `lastScanResult` object: What the last scan read and found: the log lines read, the security events found, and how many of each kind. Permissions - Create: [No access - you don't have permission for this operation], Read: [Project Owner, Project Admin, Security Admin, Security Member, Security Viewer], Update: [No access - you don't have permission for this operation]
    - `lastError` string: Why the last scan failed, if it did. Cleared by the next scan that succeeds. Permissions - Create: [No access - you don't have permission for this operation], Read: [Project Owner, Project Admin, Security Admin, Security Member, Security Viewer], Update: [No access - you don't have permission for this operation]
    - `createdByUserId` string, uuid: ID of the user who turned this source on. Permissions - Create: [No access - you don't have permission for this operation], Read: [Project Owner, Project Admin, Security Admin, Security Member, Security Viewer], Update: [No access - you don't have permission for this operation]
    - `deletedByUserId` string, uuid: ID of the user who deleted this source. Permissions - Create: [No access - you don't have permission for this operation], Read: [Project Owner, Project Admin, Security Admin, Security Member, Security Viewer], Update: [No access - you don't have permission for this operation]

## Other responses

- `400`: Bad request. This response indicates that the request was malformed or contained invalid data.
- `401`: Unauthorized. This response indicates that the request requires user authentication.
- `402`: Payment Required. This response indicates that the request requires payment or a valid subscription.
- `403`: Forbidden. This response indicates that the server understood the request, but refuses to authorize it.
- `404`: Not found. The record does not exist, belongs to another project, or is one you may not read - the same answer for each.
- `405`: Project not found. This response indicates that the requested project does not exist or is not accessible.
- `408`: Request Timeout. This response indicates that the server timed out waiting for the request.
- `415`: Unable to reach server. This response indicates that the server is currently unreachable or down.
- `422`: Not authorized. This response indicates that the user does not have permission to access the requested resource.
- `500`: Internal Server Error. This response indicates that the server encountered an unexpected condition that prevented it from fulfilling the request.

---

[API](https://skmtc.dev/oneuptime/apis/oneuptime-openapi-specification.md) - [All operations](https://skmtc.dev/oneuptime/apis/oneuptime-openapi-specification/llms.txt) - [OpenAPI document](https://skmtc.dev/oneuptime/apis/oneuptime-openapi-specification/revisions/ba3307d00304?raw)